Download PestPatrol Now Buy PestPatrol Now  
  Site Home     Support Home     Research Home     FAQs     Downloads     Help Desk  
  Help   
 

 Search
 • Support
 • Pest Research Center
 • Entire Site
 • Index
News
 • Research Center
 • Company
Stats & Graphs
 • What's New
 • What's Common
 • What's Bad
 • More Graphs
 

 

 

 

 

BrilliantDigital


· Overview ·
· Origins ·
· Distribution ·
· Operation ·
· Risks ·
· Detection and Removal ·
· Research ·



Overview

Summary:

A free viewer from BDE that plays rich media (audio and animation) and advertisements created with BDE's b3d Studio animation toolset. The b3d Projector is available as a plug-in for Internet Explorer. Similar to Onflow. Brings targeted ads to your computer, after you provide initial consent for this task. May track your browsing habits and report this info to a central ad server. Most commonly co-installed on computers through software programs such as music sharing or file sharing programs. Brilliant Digital is difficult to remove from a computer once installed because the components are actively running on the computer.

Vendor Notes:

From the doc: '* A full-featured peer-to-peer file sharing application that allows users to search for all types of digital media. * A direct distribution tool that allows content developers unfettered access to consumers and customers. * A powerful search engine where you can search on metadata such as media type, category, performer, product name and more. Search results are grouped together so the same file will only be displayed once. * Embedded Microsoft media player functionality for audio and video playback. * Instant messaging within the network. * Playlist creation and media management tools to easily organize your media file collection.'

Alias:

lliantDigital [Ad-aware], Adware-BDE [McAfee], Brilliant Digital (company name), B3D Projector (application name), BDE

See Also:

Morpheus

Category:

Spyware: Any product that employs a user's Internet connection in the background without their knowledge or explicit permission, and gathers/transmits info on the user, their machine, or their behavior.

Similar Pests:

Spyware

Origins

Author:

Brilliant Digital

By This Author:

Xrenoder

URL:

http://www.brilliantdigital.com/

Distribution

Distribution:

The b3d Projector was first released in 1997 and was distributed to users as they downloaded the Kazaa Media Desktop from Q3 2001. In late 2002 the b3d Projector became an opt-in component of Kazaa. As of February, 2003 the b3d Projector is no longer being distributed through Kazaa as BDE is focusing its efforts on its new secure peer to peer network, Altnet. Altnet is a subsidiary of BDE. Altnet's flagship product is called TopSearch, a distributed search index, which functions much like popular sponsored search programs such as Google and Yahoo Search. This technology enables artists and content owners to promote and sell their works in a secure and convenient way to users of the Kazaa Media Desktop and other applications and web sites. Users can access Altnet files by clicking on gold icon files in the Kazaa Media Desktop search results. As of May 2003 these Altnet files are distributed using the FastTrack application and protocol and can be easily purchased using Altnet's payment gateway. Downloadable from Brilliant's own site.

Previously bundled with Altnet SecureInstall. Pursuant to an agreement with Sharman Networks, SecureInstall, along with the Digital Projector, was downloaded as part of KaZaA Media Desktop, which has consistently been averaging in excess of two million downloads per week since we began bundling our software in the fall, 2001. The Installer technology connected to file servers, P2P networks and ad servers, via "connectors", for the purpose of distributing files across the network. These "connectors" consisted of small amounts of JavaScript code plus small, encrypted install scripts used by the Installer. These components helped facilitate the delivery of files - ad banners, music files, documents, software files, etc. - across the network. Apart from facilitating Altnet SecureInstall connectivity, the Installer was a full-fledged software installation system, with key features including file compression, file patching and file encryption. The file compression reduced download sizes, the file patching allowed software updates to be made available as 'patches' rather than full downloads, and file encryption provided protection from tampering for files on the network, even if they were on the hard drives of thousands of user's PCs connected to a P2P network.

Prevalence:

Fewer than 5 per 100,000 pest reports More Info

Clot Factor:

(insufficient data) [The "Clot Factor" is a measure of how much a pest "gums up" a machine by adding registry entries, files, and directories. As more objects are placed in a machine, manual removal becomes more difficult and more error-prone.]

Growth:

Insufficient data to report growth

Operation

Advertising:

Minor. It allows sites to use 'rich' advertising with 3D effects, sound, and so on. However, it does not add its own advertising to other sites.

Storage Required:

at least 9361KB

Risks

Privacy Issues:

None known. The b3d Projector does not track URLs visited or any other user behavior. BDE collects aggregated statistics that show a variety of anonymous activities, including:

1. When a Brilliant Banner ad appears, JavaScript code posts an "impression stat" to BDE's web server, indicating that an ad was shown.
2. This stat is added to an accumulated total for that day. The stat is stored only in aggregated form. No other information about the user is posted, logged or kept.
3. If the user clicks on the ad then BDE's JavaScript posts a "clicked" stat to their web server. Again, this stat is added to an accumulated total for that day, and the stat is stored only in aggregated form. No other information about the user is posted, logged or kept.
4. Stores a cookie on the user's machine so BDE cam determine if the user is seeing the ad for the first time or has seen it before. All that's ever sent back to the BDE server is "this stat is from someone who has never seen this ad before" vs. "this stat is from someone who has seen this ad before."
5. BDE's web server does not collect log files on images, HTML pages or anything else. That's actually fairly unusual - most web servers generate log files which store the user's IP address, making it possible to reconstruct the user's navigation by analyzing the files that they loaded. BDE turns off server logging so that they don't collect even this information.

Security Issues:

In its original distribution, Yes. The original Projector downloaded new components and updates silently. BDE stated in a CNet article that they intended to use this capability to execute software unrelated to the Projector across all machines where BDE is installed, thus creating a hidden distributed computing system controlled by themselves. This plan is now abandoned. No current security issues known.

Stability Issues:

Some reports of crashes and slowdown while using the software. This is not wholly surprising: the Projector has 3D functions, which are always liable to cause problems with some graphics cards and driver versions.

Detection and Removal

Automatic Removal:

PestPatrol detects this.

PestPatrol removes this.



Manual Removal:

Since the software is resistant to removal while the program is actively running please try the following steps.

  1. Open your "Control Panel" then to "Add/Remove Programs" then initiate the program removal process. This will not remove the program components but will allow PestPatrol or any other removal program the opportunity to remove the Digital Brilliance components from your computer.
  2. Once the Digital Brilliance files have been identified, run PestPatrol. Then reboot your computer, and do a final scan with PestPatrol.

If you have had Digital Brilliance installed on your computer for any length of time then you are bound to have dated program components as the software self updates. Therefore, you will need to verify that all program folders have been deleted from your computer.

You will want to delete the directory 'BDE' inside your Windows directory, and the files 'bdeinstall.exe', 'bdeinsta2.dll', 'bdefdi.dll', 'bdedata2.dll', 'bdedownloader.dll', 'bdeverify.dll', 'bdesecureinstall.exe' and 'bdesecureinstall.cab' inside your System directory (which is 'WINDOWS\SYSTEM' under Windows 95/98/Me, and 'WINNT\System32' under Windows NT/2000/XP).

Next, run regedit and remove the 'b3dUpdate' value from key 'Software\Microsoft\Windows\CurrentVersion\Run\' in HKEY_LOCAL_MACHINE. You can also remove 'Software\ZUpdate', and in HKEY_CLASSES_ROOT the keys: 'b3d', 'b3ds', 's3d_auto_file', 'b3dini_auto_file', 'BDEPLAYER.BDEPlayerCtrl[.1]', 'BDESmartInstaller.BDESmartInstallerCtrl[.1]', '.b3dini'.

Stop Running Processes:

Kill these running processes with Task Manager:

Unregister DLLs:

Unregister these DLLs with Regsvr32, then reboot:

Clean Registry:

Remove these registry items (if present) with RegEdit:

Remove Files:

Remove these files (if present) with Windows Explorer:

Remove Directories:

Remove these directories (if present) with Windows Explorer:

Research

File Analyses:

bdeload.dll · bdedetect1.dll · bderastmmx_30001.dll · bdeengine2.dll · bdeplayer2.dll · bdesac10.dll · bde3d_ref2.dll · npbdplay2.dll · bdeinsta25.dll · bdedownloader.dll · bdeverify.dll · bdeimage.dll · bdeverify.exe · bdesecureinstall.exe · bdefdi.dll · bdedata2.dll · bdeclean.exe · bdesac24.dll · bderastdx6_30002.dll · msvcirt.dllx · bdeclean.exe · about.txt · my shared folder.lnk · b3dstats.bde · installb3d3100.bde · installb3dcodecs.bde · installb3dplayer3100.bde · installb3drasts.bde · installb3dviewer2.bde · installnsplugins.bde · syscheckb3dplayer.bde · bdeengine2.dll · bdeplayer2.dll · bdeinsta2.dll · bdeclean.exe · b3dstats.bde · installb3d3105.bde · installb3dcodecs.bde · installb3dplayer3101.bde · installb3drasts.bde · installb3dviewer2.bde · setup.bde · syscheckb3dplayer.bde · bb.db · bdupd.dll · bdeinsta3.dll · bdeviewer.exe · bdeinstallman3.exe · bdewrapper3.dll · bdcore.dll · bdeinstallprogress3.dll · setup.bde · b3dstats.bde · installb3d3200.bde · installb3dcodecs.bde · installb3dplayer3200.bde · installb3drasts.bde · installb3dviewer2.bde · syscheckb3dplayer.bde · bdeclean.exe · b3d.b3d · bdefdi.dll · bb.db · asm.exe · asmps.dll · rsch.mdb · advdebug.txt · bdeimage.dll · logo.b3d · adaware-log 01-08-2003 16-34-03.txt · adaware-log 01-08-2003 16-48-48.txt · config3.ini · auto-quarantine- 01-08-2003 16-49-40.bckp · infowin2.txt · infowin3.txt · b3d projector.lnk · infowin1.txt · infowin1a.txt · installb3d3101.bde · installb3dcodecs.bde · installb3dplayer3100.bde · installb3drasts.bde · installb3dviewer2.bde · installnsplugins.bde

More Info:

  • http://security.ucdavis.edu/alerts/040402.html
  • http://www.dotcomscoop.com/article.php?sid=290
  • http://www.pcworld.com/resource/printable/article/0,aid,98344,00.asp
  • http://www.smu.edu/help/resources/KaZaA.asp
  • http://support.microsoft.com/default.aspx?scid=KB;en-us;q247501
  • http://www.cs.berkeley.edu/~nweaver/0wn2.html
  • http://zdnet.com.com/2100-11-875278.html
  • http://www.internet-tips.net/Legal/evil_brilliant.htm
  • http://terroirs.denfrance.free.fr/p/internet/espionnage_espions/brillantdigital_altnet.html
  • http://www.radsoft.net/news/20020411,00.html
  • Here is what you have agreed to: http://legalminds.lp.findlaw.com/list/cyberia-l/msg39484.html
  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
  • Research By:

  • PestPatrol's Pest Research Center
  • Last Revised:

    October 17, 2003

    Copyright:

    © 2003 PestPatrol, Inc. All rights reserved.